{"action":"Upgrade miniorange/miniorange-saml to 1.4.3 or later.","affected":[{"fixed":"1.4.3","introduced":"0"}],"component":"miniorange/miniorange-saml","cve_ids":["CVE-2021-36785"],"ecosystem":"Packagist","epss":0.00497,"exploited":false,"fixed_versions":["1.4.3"],"ghsa_id":"GHSA-jj8r-p9f5-fmvv","id":"tcs_01M5KF4MY3FBDGNT11S51QVF73","modified_at":"2023-11-08T04:06:16.428710Z","published_at":"2021-08-30T17:22:25Z","references":["https://osv.dev/vulnerability/GHSA-jj8r-p9f5-fmvv","https://nvd.nist.gov/vuln/detail/CVE-2021-36785","https://github.com/miniOrangeDev/miniorange-saml-typo3-sso/commit/1fe2802267ffe1b48823d9d8b3a496c870a0af48","https://github.com/miniOrangeDev/miniorange-saml-typo3-sso","https://typo3.org/help/security-advisories/security","https://typo3.org/security/advisory/typo3-ext-sa-2021-011"],"severity":{"label":"high","score":8.5},"sources":[{"source":"osv","source_id":"GHSA-jj8r-p9f5-fmvv","url":"https://osv.dev/vulnerability/GHSA-jj8r-p9f5-fmvv"}],"summary":"Cross-site Scripting in TYPO3 extension"}